Senior Detection Engineer - AI-Driven Security & Fintech

ARQ; United Kingdom; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Stock options

Discretionary performance bonus

The latest tools and technology

World-class team

Job summary

ARQ is seeking a senior security engineer to own detection engineering end-to-end in a cloud SIEM, onboard log sources, and tune detections. You will map coverage to MITRE ATT&CK, validate with attacker simulations, and drive automation via AI agents for rule authoring and triage.

You will collaborate with a small global security team and report to the CISO, coordinating with cloud, incident response, and threat-hunting efforts.

Qualifications

• 5+ years in security, including 3+ years owning detections in production.
• Hands-on cloud SIEM experience and its query languages.
• Experience mapping detections to MITRE ATT&CK and testing rules.
• Proficiency with Python for automation and log analysis.
• Incident response experience and ability to document findings.

Responsibilities

• Own detection engineering end to end in Datadog Cloud SIEM and onboard log sources.
• Write, test and tune detection rules; reduce false positives.
• Map coverage to MITRE ATT&CK and validate by reproducing activity.
• Manage detections as code with version control and CI pipelines.
• Build automation and AI agents for rule authoring and alert triage.
• Investigate incidents, document findings, and support containment.
• Communicate coverage, validation results and response performance to leadership.

Skills

Detection engineering

Security expertise

Python automation

Incident response

Threat hunting

English communication

Tools

Datadog Cloud SIEM

Splunk

Elastic

Google Cloud SecOps

Terraform

Git

CI pipelines

Kubernetes (EKS)

Job description

ARQ is seeking a senior security engineer to own detection engineering end-to-end in a cloud SIEM, onboard log sources, and tune detections. You will map coverage to MITRE ATT&CK, validate with attacker simulations, and drive automation via AI agents for rule authoring and triage.

You will collaborate with a small global security team and report to the CISO, coordinating with cloud, incident response, and threat-hunting efforts.